DMARCFlow vs DomainLens Pro

DMARCFlow helps you find out who is sending email in your name and whether your domain is protected against spoofing and phishing. Run free DNS checks in a few taps, understand the results without being an email expert, and monitor every domain you own from one place. FREE CHECKER TOOLS, NO ACCOUNT REQUIRED - DMARC Checker: validate your DMARC policy, alignment mode, subdomain policy and reporting setup - SPF Checker: inspect your SPF record and DNS lookup count before you hit the limit - DKIM Checker: verify that your DKIM signing key for a selector is published and valid - BIMI Checker: check whether your brand indicator is set up correctly Every check comes back as a score from 0 to 10 with a rating from Excellent to Critical, a clear list of issues and warnings, and a plain-language explanation of what each finding means and what to fix. MORE FREE TOOLS - Deliverability Check: MX, SPF, DKIM and DMARC in one check, with a single score for your domain - MX Checker: find your mail servers, see whether they are reachable and redundant, and spot null MX or missing TLSA records - Blacklist Check: test a domain or IP address against well-known spam blacklists and see exactly where it is listed - Header Analyser: paste the headers of an email to trace its delivery path and authentication results GET A DETAILED PDF REPORT Enter your email address and we send you a PDF with detailed findings and recommendations for your domain. No spam, no account required. MONITOR ALL YOUR DOMAINS (DMARCFLOW ACCOUNT) Sign in with your DMARCFlow account to go beyond one-off checks: - Live compliance dashboard across all monitored domains: compliance rate, pass rate, DMARC and policy coverage - Detailed DMARC reports showing who sends as you, from which IP addresses and with what result - Filter reports by date range, SPF or DKIM failures and search by domain, organisation or report ID - Per-record breakdown of SPF and DKIM results with an explanation of what happened and why - Geographic map of your email sources - Alerts on spoofing attempts and misconfigurations WHY DMARC MATTERS Without DMARC, SPF and DKIM, anyone can send email that looks like it comes from your domain. Properly configured authentication stops spoofing, improves deliverability and builds trust with every email you send. DMARCFlow shows you exactly where you stand and what to do next. Also included: - Full dark mode support - Available in 14 languages: English, German, French, Spanish, Portuguese, Italian, Turkish, Japanese, Chinese, Arabic, Swedish, Norwegian, Finnish and Hebrew The checker tools are free. Domain monitoring, dashboards and reports require a DMARCFlow account. See plans and pricing at dmarcflow.com.

DomainLens Pro is a one-tap domain reconnaissance toolkit for IT pros, security analysts, developers, and anyone responsible for a domain. Type any domain, IP, or URL and DomainLens Pro runs 24+ specialized probes in two parallel phases, then aggregates the results into a single color-graded report. Browse it across ten organized tabs: • Overview — A–F security grade with a confidence score, top remediation actions, and per-category breakdown • DNS & WHOIS — A, AAAA, MX, NS, TXT, SOA records, TTLs, registrar, expiry, name servers, registration history • Identity (RDAP) — RFC 9083 lookup, abuse contact, EPP statuses, transfer history, privacy-redaction detection • SSL / TLS — full certificate chain, validity, signature algorithm, SANs, OCSP stapling, forward secrecy, and post-quantum readiness (X25519MLKEM768 / SecP256r1MLKEM768) • Headers — HSTS preload eligibility, CSP nonce/hash analysis, X-Frame-Options, COOP, COEP, Referrer-Policy, Permissions-Policy • Email — SPF strict alignment, DKIM key strength, DMARC policy + alignment, MTA-STS, TLS-RPT, BIMI, DANE, full mail-server diagnostics • Web Stack — server fingerprint, technology detection, third-party JS / dependency inventory, JS-derived endpoint discovery • Exposure — sensitive file probes (.git, .env, robots.txt), CORS misconfigurations, dangerous HTTP methods, exposed login portals • Infrastructure — ASN, hosting provider, cloud platform (AWS/Azure/GCP/Cloudflare), CDN/WAF detection, GeoIP, anycast detection, RPKI validation, IPv4 + IPv6 reachability • Intel — DNSSEC validation, CAA records, HTTPS/SVCB records, dangling CNAME detection, zone-transfer test, Certificate Transparency subdomain enumeration, DNSBL reputation, CVE lookup against detected tech via NVD, historical drift tracking Also handles: • IPv4 / IPv6 reverse-lookup mode — paste an IP, get the domain back • Private network mode — paste an internal RFC 1918 IP and get ICMP/HTTP/HTTPS detection, OS fingerprint by TTL, ARP MAC vendor lookup, traceroute (full on Mac; iOS sandbox limits some probes) • Scan history with one-tap re-scan, offline browsing, sync across devices via Google Sign-In • Versioned scoring algorithm with confidence weighting and partial-result handling for slow targets • Post-quantum TLS twin probe to verify hybrid key-exchange support Built for security pros: • Full TLS pinning to the scan backend • No analytics, no ad SDKs, no third-party tracking • Sign-in is optional — without it, no personal data ever leaves the device• When you do sign in, choose any of: Apple, Google, Microsoft, GitHub, or a one-time email code (no passwords, ever)• Native iPhone, iPad, and Mac Catalyst layouts with platform-appropriate menus and Cmd+1–9 keyboard shortcuts on Mac No subscription. No upsell.